Open Information Security Foundation

05/30/2016

07:13 PM Suricata Support #1781: fast.log stops updating

Things appear to be much better now, you can close the ticket. Would you mind pointing me to some documentation rega... Jon Zeolla

05/23/2016

07:20 PM Suricata Support #1781: fast.log stops updating

That last modification has made major improvements to our stability. I've rolled back our interim fixes (scheduled r... Jon Zeolla

05/19/2016

06:08 AM Suricata Support #1781: fast.log stops updating

Peter,
I don't believe that has ever been an issue. We're are roughly 30% usage of the disk that the logs write t... Jon Zeolla

05/18/2016

07:19 PM Suricata Support #1781: fast.log stops updating

I gave that a shot and got:
18/5/2016 -- 19:56:25 - <Error> - [ERRCODE: SC_ERR_INVALID_YAML_CONF_ENTRY(139)] - Inval... Jon Zeolla

05/17/2016

09:20 AM Suricata Support #1781: fast.log stops updating

We encountered the issue again in the middle of the night last night, and the fast.log issues match with eve. That i... Jon Zeolla

05/16/2016

10:15 AM Suricata Support #1781: fast.log stops updating

I have added parallel JSON output. I will report back when I have more information. Thanks Jon Zeolla

05/14/2016

10:16 AM Suricata Support #1781: fast.log stops updating

I'm still encountering the same issue. Here's a new stats.log with the issue becoming apparent at 01:54:54. I've mo... Jon Zeolla

05/09/2016

01:06 PM Suricata Support #1781: fast.log stops updating

Good catch, that was a leftover from before we added more RAM to the box (before we were using 100% of our memory). ... Jon Zeolla

12:51 PM Suricata Support #1781: fast.log stops updating

Here's yesterday's log, and you can see the number freeze starting at 5/8/2016 -- 13:47:29 Jon Zeolla

12:45 PM Suricata Support #1781 (Closed): fast.log stops updating

Numerous hours after starting my suricata service, my fast.log stops getting appended to without a crash of the servi... Jon Zeolla